Privacy Policy

Last updated: 5 July 2026

This policy describes how the personal data of users of the "Who am I?" website (whoami.syntropic-studio.fr) is processed, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

The data controller is Maxence CORGIER, sole trader (entrepreneur individuel) operating under the trade name SYNTROPIC, 13 rue Transversale, 69009 Lyon, France. Contact: contact@syntropic-studio.fr.

2. Data collected, purposes and legal bases

At the end of the test (before any purchase). The following are recorded: your answers to the questionnaire, the calculated scores, the resulting archetype, the language and the date. This data is recorded without identifying you (without your email address). Purpose: to generate your result and allow you, where applicable, to unlock the Report. Legal basis: legitimate interest in providing the requested service.

The email address you enter on the Site to display your archetype is not transmitted to our servers at that stage; it is only recorded at the time of purchase.

When purchasing the Report. The following are processed: your email address, payment information (processed by Stripe; we do not receive your card number), the status and date of payment, the payment session identifier, the timestamp and text of your waiver of the right of withdrawal, and the date the delivery email was sent. Purposes: to process the order, deliver the Report, provide customer service, keep proof of the transaction and of the waiver, and comply with our accounting obligations. Legal bases: performance of the contract; compliance with a legal obligation (accounting); legitimate interest (proof, fraud prevention).

3. Recipients and processors

Your data is neither sold nor rented. It is accessible to the publisher and to its technical processors, acting on its instructions:

  • Supabase: database hosting (European Union, Ireland);
  • Stripe: payment processing;
  • Resend: sending the Report delivery email;
  • Netlify: hosting of the Site.

4. Transfers outside the European Union

The database is hosted in the European Union. Some processors (Stripe, Resend, Netlify) may process data in the United States. These transfers are governed by appropriate safeguards, such as the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.

5. Retention periods

  • Test results (answers, scores, archetype, language): kept for 3 years from the last access, then deleted or anonymized.
  • Purchase-related data (email, payment status, waiver): kept for the duration of the customer relationship, then archived; data required for invoicing and accounting is kept for 10 years, in accordance with Article L123-22 of the French Commercial Code.
  • Email address collected without a completed purchase: deleted within a few months.

6. Cookies and trackers

The Site does not use analytics, profiling or advertising cookies. Only cookies strictly necessary for the operation of the Site may be used; they do not require your consent. During payment, you are redirected to Stripe, which places its own cookies necessary for security and fraud prevention, governed by Stripe's privacy policy.

7. Security

Access to the database is restricted to the application server by means of a secret key; the database is configured to prohibit any direct public access. Payment information is processed by Stripe over encrypted connections.

8. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to define directives on the fate of your data after your death. To exercise them, write to contact@syntropic-studio.fr. A response will be provided within one month.

You may also lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

9. Minors

The Site is accessible from the age of 15. Data collected from a minor benefits from a reinforced right to erasure: any person may request the deletion of data concerning them that was collected while they were a minor. Purchase of the Report requires being of legal age or having the authorization of the holder of parental authority.

10. Contact

For any question regarding this policy or your data: contact@syntropic-studio.fr. No Data Protection Officer (DPO) has been appointed, as this is not mandatory; the address above is the point of contact for any request.

11. Amendment

This policy may be updated. The applicable version is the one published on the Site on the date of your consultation.